Ke khale ke batla ho "tšoara matsoho a ka" lits'ebeletso tsa Marang-rang ka ho theha marang-rang a marang-rang ho tloha qalong le ho e lokolla ho Marang-rang. Sehloohong sena ke batla ho arolelana phihlelo ea ka ea ho fetola router ea lehae ho tloha mochine o sebetsang haholo ho ea ho seva se batlang se tletse ka botlalo.
Tsohle li qalile ka taba ea hore router ea TP-Link TL-WR1043ND, e neng e sebelelitse ka botšepehi, e ne e se e sa kopane le litlhoko tsa marang-rang a lehae; Ke ne ke batla sehlopha sa 5 GHz le ho fihlella ka potlako lifaeleng tsa polokelo tse amanang le router. . Ka mor'a ho sheba liforamu tse khethehileng (4pda, ixbt), libaka tse nang le litlhahlobo le ho sheba mefuta e mengata ea mabenkele a sebakeng seo, ke ile ka etsa qeto ea ho reka Keenetic Ultra.
Maikutlo a matle a tsoang ho beng ba ona a sebelitse molemong oa sesebelisoa sena:
- ha ho na mathata a ho chesa haholo (mona re ile ra tlameha ho lahla lihlahisoa tsa Asus);
- ts'epahalo ea ts'ebetso (mona ke tšetse TP-Link);
- ho le bonolo ho e theha (ke ne ke tšaba hore ha ke khone ho e sebetsana le ho tšela Microtik).
Ke ile ka tlameha ho tobana le mefokolo:
- ha ho WiFi6, ke ne ke batla ho nka lisebelisoa tse nang le polokelo bakeng sa bokamoso;
- Likou tse 4 tsa LAN, ke ne ke batla ho feta, empa sena ha e sa le sehlopha sa lapeng.
Ka lebaka leo, re fumane "server" ena:
- ka ho le letšehali ke optical terminal ea Rostelecom;
- ka ho le letona ke router ea rona ea liteko;
- 2 GB m.128 SSD e rapaletseng, e behiloeng ka lebokoseng la USB3 ho tloha Aliexpress, e hokahane le router ka terata, hona joale e behiloe ka makhethe leboteng;
- ka pele ho na le thapo e atolositsoeng e nang le li-sockets tse ikemetseng, terata e tsoang ho eona e ea ho UPS e theko e tlaase;
- ka morao ho na le lihlopha tsa lithapo tse sothehileng - sethaleng sa ho nchafatsa folete, hang-hang ke ile ka rera li-sockets tsa RJ45 libakeng tseo thepa e neng e lokela ho ba teng, e le hore e se ke ea itšetleha ka WiFi e nang le litšila.
Kahoo, re na le lisebelisoa, re hloka ho li hlophisa:
- Ho seta ha router ho nka metsotso e ka bang 2, re bonts'a li-parameter tsa khokahano ho mofani oa thepa (terminal ea ka ea optical e fetisetsoa ho mokhoa oa borokho, khokahanyo ea PPPoE e phahamisa router), lebitso la marang-rang a WiFi le password - ha e le hantle ke eona. , router e qala ebe e sebetsa.
Re beha phetisetso ea likou tsa kantle ho li-port tsa router ka boeona karolong ea "Melao ea Marang-rang - Phatlalatso":
Joale re ka fetela karolong ea "e tsoetseng pele", seo ke neng ke se batla ho router:
- ts'ebetso ea NAS e nyane bakeng sa marang-rang a lapeng;
- ho etsa mesebetsi ea seva sa webo bakeng sa maqephe a 'maloa a lekunutu;
- ts'ebetso ea leru ea motho bakeng sa ho fumana data ea hau ho tsoa kae kapa kae lefatšeng.
Ea pele e kenngoa ts'ebetsong ho sebelisoa lisebelisoa tse hahelletsoeng, ntle le ho hloka boiteko bo boholo:
- Re nka drive e reretsoeng karolo ena (flash drive, karete ea memori ho sebali sa karete, hard drive kapa SSD ka lebokoseng le kantle ebe re e fomata ho Ext4 u sebelisa. (Ha ke na komporo e nang le Linux haufi, hoa khoneha ka lisebelisoa tse hahelletsoeng). Joalo ka ha ke e utloisisa, nakong ea ts'ebetso, sistimi e ngola feela lits'oants'o ho flash drive, kahoo haeba u li fokotsa kamora ho theha sistimi, u ka sebelisa likarete tsa memori haeba u rera ho ngola haholo mme hangata ho drive - SSD kapa HDD e betere.
Ka mor'a sena, re hokahanya koloi ho router ebe re e shebella skrineng sa ho hlahloba tsamaiso
Tobetsa ho "li-drive le li-printer tsa USB" karolong ea "Likopo" 'me u lokise karolo e karolong ea "Windows Network":
'Me re na le sesebelisoa sa marang-rang se ka sebelisoang ho tsoa ho likhomphutha tsa Windows, se hokelang joalo ka disk ha ho hlokahala: ts'ebeliso ea marang-rang y: \192.168.1.1SSD /persistent:e
Lebelo la NAS e ntlafalitsoeng joalo le lekane ts'ebeliso ea lapeng; holim'a terata e sebelisa gigabit eohle, holim'a WiFi lebelo le ka ba 400-500 megabits.
Ho theha polokelo ke e 'ngoe ea mehato e hlokahalang ho lokisa seva, ebe re hloka:
- le aterese ea IP e tsitsitseng (o ka etsa ntle le sena ka ho sebelisa Dynamic DNS, empa ke ne ke se ke ntse ke e-na le IP e tsitsitseng, kahoo ho ile ha e-ba bonolo ho e sebelisa. - , re amohela ho amohela DNS le poso sebakeng sa rona sa marang-rang);
- 'me u kenye lirekoto tse supang IP ea hau:
Ho nka lihora tse 'maloa hore domain name le litlhophiso tsa ho fana ka DNS li sebetse, kahoo re ntse re hlophisa router ka nako e le ngoe.
Taba ea pele, re hloka ho kenya polokelo ea Entware, eo ho eona re ka kenyang liphutheloana tse hlokahalang ho router. Ke ile ka nka monyetla , ha ea ka ea kenya sephutheloana sa ho kenya ka FTP, empa e thehile foldara ka kotloloho ho drive ea netweke e neng e hokahane pele mme e kopitse faele moo ka tsela e tloaelehileng.
Ha u se u fumane monyetla ka SSH, fetola phasewete ka taelo ea passwd 'me u kenye liphutheloana tsohle tse hlokahalang ka taelo ea opkg install [mabitso a liphutheloana]:
Nakong ea ho seta, liphutheloana tse latelang li kentsoe router (phello ea taelo e kentsoeng ea lenane la opkg):
Lethathamo la liphutheloana
bash - 5.0-3
busybox - 1.31.1-1
ca-bundle - 20190110-2
litifikeiti tsa ca-20190110-2
lisebelisoa tsa motheo - 8.31-1
coreutils-mktemp - 8.31-1
cron - 4.1-3
curl - 7.69.0-1
diffutils - 3.7-2
ho theoha - 2019.78-3
tokollo ea entware - 1.0-2
lintho tse fumanoang - 4.7.0-1
glib2 - 2.58.3-5
grep - 3.4-1
ldconfig - 2.27-9
libattr - 2.4.48-2
libblkid - 2.35.1-1
libc - 2.27-9
libcurl - 7.69.0-1
libffi - 3.2.1-4
libgcc - 8.3.0-9
libiconv-e tletseng - 1.11.1-4
libintl-e tletseng - 0.19.8.1-2
liblua - 5.1.5-7
libmbedtls - 2.16.5-1
libmount - 2.35.1-1
libncurses - 6.2-1
libncursesw - 6.2-1
libndm - 1.1.10-1a
libopenssl - 1.1.1d-2
libopenssl-conf - 1.1.1d-2
libpcap - 1.9.1-2
libpcre - 8.43-2
libpcre2 - 10.34-1
libpthread - 2.27-9
libreadline - 8.0-1a
librt - 2.27-9
libslang2 - 2.3.2-4
libssh2 - 1.9.0-2
libssp - 8.3.0-9
libstdcpp - 8.3.0-9
libuid - 2.35.1-1
libxml2 - 2.9.10-1
libaka - 2.27-9
mc - 4.8.23-2
ndmq - 1.0.2-5a
nginx - 1.17.8-1
openssl-sebelisoa - 1.1.1d-2
opkg — 2019-06-14-dcbc142e-2
khetha-ndmsv2 - 1.0-12
php7 - 7.4.3-1
php7-mod-openssl - 7.4.3-1
poorbox - 1.31.1-2
terminfo - 6.2-1
zlib - 1.2.11-3
zoneinfo-asia - 2019c-1
zoneinfo-europe - 2019c-1
Mohlomong ho ne ho e-na le ho hong ho sa hlokahaleng mona, empa ho ne ho e-na le sebaka se ngata koloing, kahoo ha kea ka ka ikhathatsa ho e sheba.
Ka mor'a ho kenya liphutheloana, re lokisa nginx, ke e lekile ka libaka tse peli - ea bobeli e hlophisitsoe ka https, 'me hajoale ho na le stub. Ho sebelisoa likou tsa ka hare tsa 81 le 433 sebakeng sa 80 le 443, kaha phanele ea tsamaiso ea router e leketlile likoung tse tloaelehileng.
joalo-joalo/nginx/nginx.conf
user nobody;
worker_processes 1;
#error_log /opt/var/log/nginx/error.log;
#error_log /opt/var/log/nginx/error.log notice;
#error_log /opt/var/log/nginx/error.log info;
#pid /opt/var/run/nginx.pid;
events {
worker_connections 64;
}
http {
include mime.types;
default_type application/octet-stream;
#log_format main '$remote_addr - $remote_user [$time_local] "$request" '
# '$status $body_bytes_sent "$http_referer" '
# '"$http_user_agent" "$http_x_forwarded_for"';
#access_log /opt/var/log/nginx/access.log main;
sendfile on;
#tcp_nopush on;
#keepalive_timeout 0;
keepalive_timeout 65;
#gzip on;
server {
listen 81;
server_name milkov.su www.milkov.su;
return 301 https://milkov.su$request_uri;
}
server {
listen 433 ssl;
server_name milkov.su;
#SSL support
include ssl.conf;
location / {
root /opt/share/nginx/html;
index index.html index.htm;
error_page 500 502 503 504 /50x.html;
location = /50x.html {
root html;
}
}
}
</spoiler>
<spoiler title="etc/nginx/ssl.conf">
ssl_certificate /opt/etc/nginx/certs/milkov.su/fullchain.pem;
ssl_certificate_key /opt/etc/nginx/certs/milkov.su/privkey.pem;
ssl_ciphers 'ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:AES:CAMELLIA:DES-CBC3-SHA:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!PSK:!aECDH:!EDH-DSS-DES-CBC3-SHA:!EDH-RSA-DES-CBC3-SHA:!KRB5-DES-CBC3-SHA';
ssl_prefer_server_ciphers on;
ssl_dhparam /opt/etc/nginx/dhparams.pem;
ssl_session_cache shared:SSL:10m;
ssl_session_timeout 5m;
ssl_stapling on;E le hore sebaka sa marang-rang se sebetse ka https, ke sebelisitse sengoloa se tsebahalang sa dehydrated, ke se kenya ke sebelisa . Ts'ebetso ena ha ea ka ea baka mathata, ke ile ka khoptjoa feela ke taba ea hore mongolong oa script bakeng sa ho sebetsa ho router ea ka. /opt/etc/ssl/openssl.cnf:
[openssl_conf]
#engines=engines'Me kea hlokomela hore ho hlahisa dhparams.pem ka taelo ea "openssl dhparam -out dhparams.pem 2048" ho router ea ka ho nka lihora tse fetang 2, haeba e se bakeng sa pontšo ea tsoelo-pele, nka be ke lahlehetsoe ke mamello le ho tsosolosa.
Kamora ho fumana litifikeiti, qala hape nginx ka taelo "/opt/etc/init.d/S80nginx restart". Ha e le hantle, ho seta ho felile, empa ha ho na sebaka sa marang-rang - haeba re kenya faele ea index.html bukeng ea /share/nginx/html, re tla bona stub.
index.html
<!DOCTYPE html>
<html>
<head>
<title>Тестовая страничка!</title>
<style>
body {
width: 35em;
margin: 0 auto;
font-family: Tahoma, Verdana, Arial, sans-serif;
}
</style>
</head>
<body>
<h1>Тестовая страничка!</h1>
<p>Это простая статическая тестовая страничка, абсолютно ничего интересного.</p>
</body>
</html>Ho beha tlhahisoleseling ka bokhabane, ho bonolo hore motho eo e seng setsebi joalo ka 'na a sebelise litempele tse seng li entsoe; kamora ho batlisisa nako e telele li-catalogs tse fapaneng, ke fumane. - ho na le khetho e ntle ea litempele tsa mahala tse sa hlokeng ho fana (tse sa tloaelehang ho Marang-rang; boholo ba litempele tsa laesense li hloka hore u boloke sehokelo sa mohloli oo li fumanoeng ho ona).
Re khetha template e loketseng - ho na le bakeng sa linyeoe tse fapaneng, khoasolla polokelo 'me u e lokolle bukeng ea /share/nginx/html, o ka etsa sena ho tsoa komporong ea hau, ebe o hlophisa template (mona o tla hloka tsebo e fokolang. ea HTML e le hore e se ke ea senya sebopeho) 'me u nke sebaka sa litšoantšo joalokaha ho bontšitsoe setšoantšong se ka tlase.
Kakaretso: router e loketse haholo bakeng sa ho tsamaisa sebaka sa marang-rang se bobebe ho eona, ha e le hantle - haeba u sa lebella mojaro o moholo, o ka , 'me u leke merero e rarahaneng haholoanyane (ke sheba nextcloud/owncloud, ho bonahala ho na le lisebelisoa tse atlehileng ho hardware e joalo). Bokhoni ba ho kenya liphutheloana bo eketsa molemo oa eona - ka mohlala, ha ho ne ho hlokahala ho sireletsa boema-kepe ba RDP ba PC marang-rang a lehae, ke kentse ho kokota ho router - mme ho fetisetsa koung ho PC ho ile ha buloa feela kamora ho kokota ha koung.
Ke hobane'ng ha router e se PC e tloaelehileng? Router ke e 'ngoe ea likaroloana tse seng kae tsa khomphutha tse sebetsang bosiu le motšehare lifoleteng tse ngata; router ea lapeng hangata e khutsitse mme sebaka se bobebe se nang le maeto a ka tlase ho lekholo ka letsatsi se ke ke sa e khathatsa ho hang.
Source: www.habr.com